> if you want high-availability - you need to double that.

Triple. 1 and 2 nodes will give failure allowance of zero.